CVE-2008-3699: Amarok

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.

Affected products

• Amarok Amarok: version 1.4.9.1 only

Published 2008-08-14. Last modified 2026-06-16.